MODRNA WG

What is MODRNA WG?

MODRNA (pronounced modernah) stands for Mobile Operator Discovery, Registration & autheNticAtion. The MODRNA WG will develop a profile of OpenID Connect intended to be appropriate for use by mobile network operators (MNOs) providing identity services to RPs and for RPs in consuming those services as well as any other party wishing to be interoperable with this profile. Moreover, the WG will develop extensions to OpenID Connect as needed in the context of GSMA’s Mobile Connect initiative, such as server-initiated authentication, transaction authorization, and account migration to support the requirement from MNOs. Additionally, it will identify and make recommendations for additional standards items.

Overview

With the increasing usage of the mobile device to manage various transactions, the Mobile Network Operator (MNO) play a crucial role in the identity ecosystem and partner to leveraging their specific technical capabilities. The MODRNA WG aims to create a profile of OpenID Connect tailored to the specific needs of mobile networks and devices thus enabling usage of operator ID services in an interoperable way.

To start with, OpenID Connect basically relies on the e-mail address to determine a user’s OpenID provider (OP). In the context of mobile identity, the mobile phone number or other suitable mobile network data are considered more appropriate. The working group propose extensions to the OpenID discovery function to use this data to determine the operator’s OP, taking also into consideration protection of this data’s privacy (esp. mobile phone number).

Reaching all mobile users in a certain market requires a RP to connect to all of its user’s MNOs. The working group will develop mechanisms so a RP can get approved for identity service once and connect at runtime to any relevant MNO without have to manually register at each one.

As service providers may have different requirements regarding a certain authentication transaction, the MODRNA profiles will also define a set of authentication policies operator OP’s are recommended to implement and service providers can choose from.

The working group was setup in cooperation with the GSMA in order to support GSMA’s Mobile Connect and its evolution to further this work.

Link to the Issues

Participation

Please note that while anyone can join the mailing list as a read-only recipient, posting to the mailing list or actively contributing to the specification itself requires the submission of an IPR Agreement. More information is available at http://openid.net/intellectual-property. Make sure to specify the working group as MODRNA WG.

This website uses cookies to allow us to provide you the best experience while visiting our website. By continuing to use the site, you are agreeing to our use of cookies. You can change your cookie settings at any time but if you do, you may lose some functionality. More information may be found in our Privacy Policy.Confirm